Deprecated contract paused but pause reversible by live admin

Meteora's assessment for RD-F-167 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Mercurial legacy Multi-token Stable Pool (MERLuDFBMmsHnsBPZw2sDQZHvXFMwp8EdjudcU2HKky) is a deprecated program. Whether it holds material value (>$100k) and whether admin retains a reversible pause: not decoded this pass. Dynamic Vault (24Uqj9JCLxUeoC3hGfh5W3s9FM9uCHDS2SG3LYwBpyTi) is legacy but may hold user funds. Upgrade authority and pause-state for both legacy programs not verified.

Sources #

Internal
Meteora Protocol Profile — Legacy Programs.research/protocols/meteora/00-profile.md §3 — legacy program addresses and note for code-security-analystretrieved 2026-05-16
Docs
Meteora on Solana: Project ReviewSolanaCompass Meteora — Dynamic Vault and legacy Mercurial programs listedretrieved 2026-05-16

Methodology #

Determine whether a deprecated-and-paused contract's pause state is revertible by a currently-live admin role.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol meteora factor RD-F-167 score gray collected_at 2026-05-16 10:03:05